Data Breach Today

JUNE 21, 2021

SEC: Executives Left in Dark About Vulnerability in File-Sharing System Title insurance company First American Financial Corp. Information security staff members were aware of the vulnerability in the company's EaglePro document-sharing system for five months but failed to fix it, the SEC reports.

Insurance 346

Insurance Data breaches Information Security Security 346

Krebs on Security

JUNE 18, 2021

NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. Securities and Exchange Commission settled its investigation into the matter after the Fortune 500 company agreed to pay a paltry penalty of less than $500,000.

Insurance 277

Insurance Risk Financial Services Mining 277

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

Krebs on Security

OCTOBER 28, 2020

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. Acting on a tip from Milwaukee, Wis.-based

Ransomware 343

Ransomware Security Agriculture Cybersecurity 343

IT Governance

MARCH 20, 2024

In the UK, cyber security has been dropping down the board’s list of priorities. The UK government’s Cyber Security Breaches Survey 2023 confirms this trend. Fewer directors, trustees and other senior managers of both UK businesses and charities see cyber security as a high priority in 2023 compared to 2022. Specifically, a 13.4%

Security 116

Security Data breaches Government Insurance 116

Krebs on Security

AUGUST 14, 2020

The “RCM” portion of its name refers to “revenue cycle management,” an industry which tracks profits throughout the life cycle of each patient, including patient registration, insurance and benefit verification, medical treatment documentation, and bill preparation and collection from patients.

Ransomware 361

Ransomware Insurance Phishing IT 361

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. Damages incurred by information security incidents generally aren’t covered in commercial insurance policies, so a specific policy is necessary to help cover the costs of things like forensic investigation, incident response and notification procedures.

Insurance 89

Insurance Data breaches Risk Information Security 89

Krebs on Security

JULY 23, 2020

In May 2019, KrebsOnSecurity broke the news that the website of mortgage title insurance giant First American Financial Corp. based First American [ NYSE:FAF ] is a leading provider of title insurance and settlement services to the real estate and mortgage industries. It employs some 18,000 people and brought in $6.2 billion in 2019.

Insurance 296

Insurance Financial Services Mining Access 296

Security Affairs

AUGUST 7, 2019

The American group of insurance and financial services companies State Farm disclosed a credential stuffing attack it has suffered in July. The American group of insurance and financial services companies State Farm revealed that it was the victim of a credential stuffing attack it has suffered in July. Pierluigi Paganini.

Insurance 86

Insurance Data breaches Financial Services Passwords 86

Security Affairs

APRIL 29, 2024

Hutcheson allegedly provided irrelevant documents, such as health insurance and auto insurance policies, along with pages from sheriff training manuals, as evidence of authorization to access the data. Carriers must adopt reasonable measures to prevent unauthorized access to customer data.

Insurance 98

Insurance Communications Access IT 98

IT Governance

NOVEMBER 6, 2023

According to the security company Resecurity , which discovered the listing, the data included victims’ name, age, gender, address, passport number and Aadhaar number (a 12-digit government identification number). It secured its systems, notified law enforcement and began investigating the incident. Boeing is “assessing the claim”.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

The Last Watchdog

MARCH 13, 2019

Melissa was hidden in a weaponized Word document that arrived as an email attachment. Votiro is a Tel Aviv-based security startup that is pioneering a new white-listing approach to help companies mitigate their exposure to weaponized email and document-distributed malware. The key takeaways: Productivity vs. security.

Systems administration 100

Systems administration Financial Services Insurance Security 100

Security Affairs

APRIL 10, 2024

The Group Health Cooperative of South Central Wisconsin (GHC-SCW) is a non-profit organization that provides health insurance and medical care services to its members in the Madison metropolitan area of Wisconsin. The Information Technology (IT) Department isolated and secured the organization’s network in response to the incident.

Data breaches 116

Data breaches e-Discovery Ransomware Insurance 116

Data Breach Today

MAY 13, 2019

Security Experts Say Prosecution's Document Offers Critical Cybersecurity Insights The indictment of two Chinese men for a 2014 cyberattack on health insurer Anthem that compromised information on nearly 80 million individuals contains extensive details about the incident that security professionals can use to help with their breach prevention strategies. (..)

Insurance 189

Insurance Cybersecurity Security 189

Krebs on Security

APRIL 27, 2023

Until being contacted by this reporter on Monday, the state of Vermont had at least five separate Salesforce Community sites that allowed guest access to sensitive data, including a Pandemic Unemployment Assistance program that exposed the applicant’s full name, Social Security number, address, phone number, email, and bank account number.

Access 290

Access Authentication Information Security Communications 290

Schneier on Security

JUNE 7, 2023

New paper: “ Lessons Lost: Incident Response in the Age of Cyber Insurance and Breach Attorneys “: Abstract: Incident Response (IR) allows victim firms to detect, contain, and recover from security incidents. It should also help the wider community avoid similar attacks in the future.

Insurance 84

Insurance Cybersecurity Paper Communications 84

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. GDPR (among other legal requirements in the EU and elsewhere) can expose multinational organizations to hefty financial penalties, additional rules for disclosing data breaches, and increased scrutiny of the adequacy of their data security.

Data Privacy 142

Data Privacy Compliance Privacy Security 142

Armstrong Archives

MARCH 27, 2018

Your insurance company has been collecting and storing consumer data for as long as it’s been in business. That information is vital to your everyday operation, and it’s vulnerable to security breech. Many companies look to off-site storage for an affordable, secure solution. Benefits of Off-Site Storage.

Insurance 40

Insurance Archiving Records Management Paper 40

Hunton Privacy

AUGUST 10, 2022

On July 21, 2022, the National Institute of Standards and Technology (“NIST”) released an updated draft of its HIPAA Security Rule guidance. NIST issued the updated draft guidance to align it with other NIST cybersecurity guidance documents that have been published since the original HIPAA Security Rule guidance was issued in 2008.

Security 64

Security Insurance Cybersecurity Risk 64

Krebs on Security

JANUARY 23, 2019

As a nation, we are much less safe from a cyber security posture than we were a month ago.” “These are criminal investigations involving national security. . “These are criminal investigations involving national security. “In the past week, the number of outdated Web security certificates held by U.S.

Security 259

Security Government Insurance Cybersecurity 259

Security Affairs

NOVEMBER 17, 2023

” In response to the security incident, the company took the impacted systems offline and launched an investigation with the help of law enforcement. The security incident appears to have been limited to TFS Europe & Africa. TFS offers various financial products, including auto loans, leases, and insurance solutions.

Financial Services 123

Financial Services Ransomware Data breaches Insurance 123

eSecurity Planet

MARCH 18, 2022

Many security professionals think that if they have done the hard work of securing their organization, that should be enough. There is, however, a next step: Documenting policies. Written documentation. Written security policies. Security Policy Tips. Start with what you have.

IT 117

IT Compliance Security Access 117

Security Affairs

DECEMBER 11, 2023

TFS offers various financial products, including auto loans, leases, and insurance solutions. Toyota Financial Services warns its German customers to remain vigilant and contact their bank to take additional security precautions. Toyota also notified the data protection officer for North Rhine-Westphalia about the security breach.

Financial Services 113

Financial Services Data breaches Ransomware Insurance 113

Security Affairs

APRIL 16, 2024

Gb - NDA The group published a set of files as proof of the security breach and threatens leak all the stolen data if the victim will not pay the ransom. . - Gb - NDA The group published a set of files as proof of the security breach and threatens leak all the stolen data if the victim will not pay the ransom. pst files - 1.5

Ransomware 111

Ransomware Manufacturing Insurance Cybersecurity 111

Rocket Software

OCTOBER 8, 2020

Travel insurance can give travelers some assurance that, if something does go wrong, they have resources that can help them receive medical attention, stay safe, and return home. . In order to provide the best possible experience, the insurance provider needed to upgrade their existing IT systems. . The Solution: Rocket ® EOS 360.

Insurance 89

Insurance Archiving Access Security 89

Security Affairs

FEBRUARY 26, 2021

Our online security team has uncovered a massive data breach originating from a misconfigured Amazon Bucket, which was operated by a Turkish Legal advising company, INOVA YÖNETIM & AKTÜERYAL DANI?MANLIK. Inova is an actuarial consultancy company, which means they compile statistical analysis and calculate insurance risks and premiums.

Data breaches 97

Data breaches Insurance Paper Access 97

Security Affairs

APRIL 30, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 90

Security Ransomware Cybersecurity Authentication 90

Krebs on Security

DECEMBER 8, 2022

Alex Holden is founder of Hold Security , a Milwaukee-based cybersecurity firm. The CLOP members said one tried-and-true method of infecting healthcare providers involved gathering healthcare insurance and payment data to use in submitting requests for a remote consultation on a patient who has cirrhosis of the liver. ”

Ransomware 262

Ransomware Metadata Insurance Encryption 262

Krebs on Security

AUGUST 29, 2019

-based PerCSoft is a cloud management provider for Digital Dental Record (DDR), which operates an online data backup service called DDS Safe that archives medical records, charts, insurance documents and other personal information for various dental offices across the United States. ” Read the full ProPublica piece here. .

Ransomware 223

Ransomware Insurance Encryption Cloud 223

Krebs on Security

JUNE 4, 2019

Securities and Exchange Commission , LabCorp. AMCA has advised LabCorp that Social Security Numbers and insurance identification information are not stored or maintained for LabCorp consumers.” credit card numbers and bank account information), medical information and Social Security Numbers. ” ANALYSIS.

Insurance 249

Insurance Data Privacy Access Security 249

Hunton Privacy

FEBRUARY 29, 2024

The resolution agreement requires Green Ridge to pay $40,000 to OCR and enter into a Corrective Action Plan that obligates Green Ridge to, among other items: Implement a security management process, including a thorough risk analysis, which is to be provided to HHS for review within 60 days.

Ransomware 111

Ransomware Personal data Risk Privacy 111

Krebs on Security

AUGUST 12, 2019

Securities and Exchange Commissio n (SEC) is investigating a security failure on the Web site of real estate title insurance giant First American Financial Corp. No authentication was required to view the documents. First American Financial Corp. ” The SEC did not respond to requests for comment.

Insurance 225

Insurance Access Authentication Cybersecurity 225

Security Affairs

JULY 21, 2021

Experts found a DB containing sensitive health insurance data belonging to customers of US insurance giant Humana. An SQL database containing what appears to be highly sensitive health insurance data of more than 6,000 patients has been leaked on a popular hacker forum. What was leaked? Drug prescription listings).

Insurance 113

Insurance Passwords Libraries Access 113

Security Affairs

OCTOBER 1, 2023

Experts warn that the recent attack on building automation giant Johnson Controls may have exposed data of the Department of Homeland Security (DHS). The company provides HVAC (heating, ventilation, and air conditioning), solutions for building automation, fire and security systems, and components for energy management. “The

Ransomware 128

Ransomware Insurance Cybersecurity Encryption 128

Security Affairs

JANUARY 7, 2023

The gang initially leaked samples of the stolen data as proof of the attack, it claimed to have stolen contracts, NDA and other agreements documents, company private info (budgets, plans, evaluations, revenue cycle, investors relations, company structure, etc.), ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon. .”

Ransomware 82

Ransomware Insurance Data breaches Access 82

Schneier on Security

MAY 28, 2019

Krebs on Security is reporting a massive data leak by the real estate title insurance company First American Financial Corp. Shoval shared a document link he'd been given by First American from a recent transaction, which referenced a record number that was nine digits long and dated April 2019.

Insurance 87

Insurance Privacy Security 87

Armstrong Archives

DECEMBER 19, 2023

Everything from tax documents to employee files to bank statements must be kept on file, often for years at a time. At Armstrong Archives , we’re proud to stand at the forefront of records management, offering expert guidance in record retention policy and document management, ensuring that our clients stay compliant and efficient.

Compliance 52

Compliance Archiving Digital transformation Sales 52